Google Password Hacked: Secure Your Account

Recognize a Compromised Google Account

If your Google password was hacked, act as soon as you notice something unusual. A changed password is a strong warning sign, but you may still be able to sign in if the intruder has not locked you out.

Common signs include:

• Your usual password suddenly does not work.
• You receive an alert about a sign-in, password change, or security change you did not make.
• The recovery email address or recovery phone number has changed.
• Your account shows devices or locations you do not recognize.
• Messages appear in Sent, Drafts, or Trash that you did not write.
• Contacts report receiving strange messages from your address.
• Security settings, Gmail forwarding, filters, or account permissions look different.

Do not approve an unexpected sign-in prompt or share a verification code. If you received a genuine-looking security notice, open your Google Account separately instead of using a link in the message.

Recover Access to Your Google Account

If the current password no longer works, open {site}, choose Sign In, enter the email address, and select the account recovery option. Follow the questions shown on the screen. Use a familiar phone, tablet, or computer if possible, and connect from a place where you normally sign in.

Google may ask for a recent password you remember, access to a recovery email or phone, or other information connected with the account. Answer as accurately as you can. Never send a password or verification code to another person, including anyone claiming that they can recover the account for you.

If a recovery choice is unfamiliar, look for another available verification option. Check your recovery email account, including its spam folder, for messages related to the request. Avoid making repeated guesses if you are unsure; review the information you have and try again carefully.

Someone dealing with a Google email password hacked incident should also secure the recovery email account. An intruder who controls that mailbox may be able to interfere with recovery or reset the password again.

Change the Hacked Google Password

If you can still sign in, open your Google Account settings and select Security. Find the sign-in section, choose Password, confirm your identity if asked, and enter a new password.

The replacement should be long, unique, and never used before. Do not make a small change to the old password or reuse one from another account. A password manager can create and store a strong password so you do not have to remember it.

Changing the password may not remove every form of access. An intruder could still have an active device, a connected application, altered recovery information, or hidden Gmail settings. Complete the remaining checks even if the password change succeeds.

Review Security Activity and Devices

In the Security area of your Google Account, review recent security activity. Look for password changes, recovery-detail changes, sign-ins, and other events you did not initiate. If Google offers a way to mark an event as unfamiliar, follow the prompts to protect the account.

Next, review the devices where the account is signed in. Open each entry and compare the device type, approximate location, and activity time with your own use. Some details may be approximate, so consider whether you were traveling, using mobile data, or using a device that reports a different location.

Sign out any device or session you do not recognize. If you are uncertain about an old device, signing it out is safer; you can sign in again later on equipment you still control.

Review third-party applications and services with account access. Remove anything unfamiliar, unnecessary, or no longer used. Also check for application-specific passwords or other sign-in methods you did not create.

Restore Recovery and Gmail Settings

Check the recovery phone and recovery email in your Google Account. Remove unfamiliar details and restore information that you control. Protect the recovery email with its own unique password and two-step verification when available.

Then inspect Gmail for changes that could let someone monitor or redirect messages:

• Check forwarding settings for an address you did not add.
• Review filters for rules that forward, delete, archive, mark as read, or hide messages.
• Inspect delegation or account-access settings for people you did not authorize.
• Review blocked addresses, signatures, automatic replies, and sending identities for unwanted changes.
• Look in Sent, Trash, Spam, and archived mail for activity you do not recognize.

Remove unauthorized settings carefully. Tell affected contacts to ignore suspicious messages sent from your account. Do not forward a suspicious message or attachment to prove what happened, because that can spread a harmful link or file.

Protect the Account After Recovery

Turn on two-step verification in the account’s Security settings. Review the available verification methods and keep backup options in a secure place. Remove phone numbers, devices, or security methods that you no longer control.

If the hacked Google password was reused anywhere else, change it on every affected account, starting with the recovery email, financial accounts, and other accounts that could be used to verify your identity. Give each account a different password.

Check devices you used with the account for unfamiliar applications, browser extensions, or security warnings. Update the operating system and browser. If you entered your password after following a suspicious message, treat that message as phishing and be alert for similar attempts.

Continue watching account alerts, recent activity, recovery details, and sent mail. Be cautious if someone contacts you claiming to be support and asks for your password, a verification code, or approval of a sign-in prompt. Those secrets should remain with you.